Who can see your prompt
Every request is encrypted end to end to the one machine that will answer it. The relay that carries it moves opaque frames and never holds a key, and nothing anywhere in the system stores prompt or completion text. Both properties are checked automatically before every release.
The X-Privacy-Tier header names the floor you will accept. Routing may
serve you from a stronger tier but never a weaker one; if nothing on the network meets the
floor, the request fails instead.
- self
- The answering machine belongs to your own organisation. No third party runs it.
- verified-unattested
- Encrypted transport to a sealed serving machine, with a software-reported inventory — and no hardware root of trust, which is why the name says so. This is the strongest tier we serve today, and we will not call it more than it is.
- verified · confidential
- Defined, not offered. Asking for either returns an error today, never a quiet downgrade.
Response headers say what served you — X-Provider-Trust-Level,
X-Provider-Region, GPU class, backend — and never which machine.